What’s Vulnerable › Vulnerabilities

CVE-2018-3991

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 34.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2019-02-05 · updated 2026-06-17
• Weakness: CWE-787

Description

An exploitable heap overflow vulnerability exists in the WkbProgramLow function of WibuKey Network server management, version 6.40.2402.500. A specially crafted TCP packet can cause a heap overflow, potentially leading to remote code execution. An attacker can send a malformed TCP packet to trigger this vulnerability.

Affected products

• Siemens AG SIMATIC WinCC OA V3.14 and prior: 3.14, 3.15, 3.16
• WibuKey Runtime: 6.40.2402.500

References

• http://www.securityfocus.com/bid/107005
• https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659
• http://www.securityfocus.com/bid/107005
• https://cert-portal.siemens.com/productcert/pdf/ssa-760124.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-844562.pdf
• https://cert-portal.siemens.com/productcert/pdf/ssa-902727.pdf
• https://talosintelligence.com/vulnerability_reports/TALOS-2018-0659

Get alerted when CVE-2018-3991 or the next vulnerability affects your stack